CVE-2026-63693

Severity: medium (CVSS 6.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-24 · updated 2026-10-12
Weakness: CWE-379

Description

Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write

Affected products

Dell Alienware Area-51 AAT2265: before 1.8.1 — fixed in 1.8.1
Dell Alienware Area 51m R2: before 1.37.0 — fixed in 1.37.0
Dell Alienware Aurora R13: before 1.33.0 — fixed in 1.33.0
Dell Alienware Aurora R15: before 1.29.0 — fixed in 1.29.0
Dell Alienware Aurora R15 AMD: before 1.26.0 — fixed in 1.26.0
Dell Alienware Aurora Ryzen Edition R14: before 2.32.0 — fixed in 2.32.0
Dell Alienware m15 R3: before 1.37.0 — fixed in 1.37.0
Dell Alienware m15 R4: before 1.35.0 — fixed in 1.35.0
Dell Alienware m17 R3: before 1.37.0 — fixed in 1.37.0
Dell Alienware m17 R4: before 1.35.0 — fixed in 1.35.0
Dell Alienware x15 R1: before 1.34.0 — fixed in 1.34.0
Dell Alienware x17 R1: before 1.34.0 — fixed in 1.34.0
Dell AURORA R16: before 2.25.0 — fixed in 2.25.0
Dell Inspiron 15 3510: before 1.30.0 — fixed in 1.30.0
Dell Inspiron 15 3521: before 1.25.0 — fixed in 1.25.0
Dell XPS 8950: before 1.33.0 — fixed in 1.33.0
Dell XPS 8960: before 2.24.0 — fixed in 2.24.0

How to fix

Upgrade to a fixed version: Dell Alienware Area-51 AAT2265 1.8.1; Dell Alienware Area 51m R2 1.37.0; Dell Alienware Aurora R13 1.33.0; Dell Alienware Aurora R15 1.29.0; Dell Alienware Aurora R15 AMD 1.26.0; Dell Alienware Aurora Ryzen Edition R14 2.32.0; Dell Alienware m15 R3 1.37.0; Dell Alienware m15 R4 1.35.0; Dell Alienware m17 R3 1.37.0; Dell Alienware m17 R4 1.35.0; Dell Alienware x15 R1 1.34.0; Dell Alienware x17 R1 1.34.0. Check the vendor advisory for mitigations.

References

https://www.dell.com/support/kbdoc/en-us/000501826/dsa-2026-280-security-update-for-dell-client-platform-bios-for-an-improper-link-resolution-before-file-access-link-following-vulnerability

Get alerted when CVE-2026-63693 or the next vulnerability affects your stack